Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/3138312e3232342e37332e302f32342d3234203d3e203131383330.roa
File:                     3138312e3232342e37332e302f32342d3234203d3e203131383330.roa (raw, json)
Hash identifier:          /UXSpGFCrjQrhrcc97k96hF/54K6Js2rJYj80Tqf+vc=
Subject key identifier:   C2:1F:12:DA:32:AD:24:CE:97:BF:1B:26:E0:FE:9C:FA:96:05:92:FE
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       11E3E76DA7378E53511F47BCF010B634E60B244B
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/3138312e3232342e37332e302f32342d3234203d3e203131383330.roa
Signing time:             Tue 05 Mar 2024 18:15:37 +0000
ROA not before:           Tue 05 Mar 2024 18:10:37 +0000
ROA not after:            Tue 04 Mar 2025 18:15:37 +0000
asID:                     11830
IP address blocks:        181.224.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e3:e7:6d:a7:37:8e:53:51:1f:47:bc:f0:10:b6:34:e6:0b:24:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Mar  5 18:10:37 2024 GMT
            Not After : Mar  4 18:15:37 2025 GMT
        Subject: CN=C21F12DA32AD24CE97BF1B26E0FE9CFA960592FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:bb:61:a0:e9:bb:a7:43:81:4a:fa:f7:46:
                    5b:d5:fd:c0:c5:eb:9e:90:e9:88:6e:ff:01:00:d1:
                    f0:57:e5:6b:10:50:c9:d8:b4:4a:57:7c:24:56:9a:
                    42:05:fa:d6:39:6f:ea:bd:33:46:1e:85:e8:30:ae:
                    4a:ea:a0:4d:a4:48:e9:0c:93:04:42:a7:68:f5:e3:
                    be:2a:ce:c6:08:e2:1b:a0:88:c4:b3:39:23:bf:93:
                    6b:b5:f4:07:15:f2:1f:14:d7:c0:0a:9a:63:5c:28:
                    fa:d3:37:81:d2:21:ed:38:17:ba:74:ca:58:1f:e7:
                    54:76:01:fa:05:2a:e8:98:15:50:6c:c8:e7:53:9e:
                    9d:0c:da:3d:ba:32:9d:3a:3c:71:c6:ea:3b:21:77:
                    71:62:72:a8:56:40:7a:fe:f1:d8:98:de:f9:87:f8:
                    85:8b:1a:61:ae:7a:2f:85:4f:d3:91:78:e4:b4:9a:
                    41:a7:84:29:e6:93:6f:04:e7:da:50:b4:8d:ef:4a:
                    24:a2:9d:f0:3f:57:16:ff:e2:8f:25:b6:ec:4e:9e:
                    c5:7e:d4:04:4e:0c:ba:c1:30:16:0c:72:97:d3:b2:
                    09:ce:c6:36:55:51:05:31:26:74:4f:bf:dc:36:1c:
                    11:63:a0:6a:9d:fb:46:f1:77:50:3e:fa:a7:59:0d:
                    0c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1F:12:DA:32:AD:24:CE:97:BF:1B:26:E0:FE:9C:FA:96:05:92:FE
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/3138312e3232342e37332e302f32342d3234203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:37:d9:bf:e1:57:39:66:2c:9c:ba:d6:b6:15:2b:d2:05:5f:
         aa:1d:7a:89:79:5b:fd:11:f4:c8:b8:ec:e3:75:a0:c5:0c:8d:
         a5:2f:db:02:86:50:c1:47:88:6f:80:85:ce:cd:22:23:71:f9:
         1f:d1:e3:16:dc:fe:7a:be:50:fe:01:ec:43:05:5c:39:a3:97:
         f0:5f:47:03:0f:9c:49:23:0a:d5:b4:1d:9d:d6:45:ef:7a:17:
         ec:83:cd:23:f9:d4:00:6f:3d:86:ef:29:44:87:69:69:cb:80:
         17:b3:83:ff:55:2e:3f:b0:ec:82:fa:cf:e5:6f:e7:55:76:15:
         5e:35:18:f8:a9:d9:9b:4e:e6:71:32:8e:eb:38:45:97:49:8b:
         6d:32:e9:04:62:18:db:86:39:1b:3f:6c:8e:6e:c2:eb:fd:db:
         d9:3f:92:3e:c4:cb:7f:73:3b:29:d1:40:a7:83:27:48:07:34:
         7f:e3:80:73:23:48:5c:7d:5f:e0:31:6d:1e:fc:99:ba:17:0d:
         e8:02:26:a2:f2:45:a8:fa:f3:2d:5a:42:b5:8c:f8:57:1c:73:
         d2:bd:9a:e7:ef:12:21:e1:b9:02:34:dd:e2:e6:96:d3:98:f4:
         92:6d:b8:56:5f:0a:0c:1e:b2:a8:1e:67:4f:14:09:64:5b:06:
         24:3a:c4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org